سجل تدقيق مستقل يربط نتيجة البحث بالأدلة والتناقضات وحالة الالتزام والـReadback والمتابعة دون استنتاج حالة غير مسجلة.
Canonical Run ID
ACRIP-AIS-20261101-001
ناجح · PASS
What ran?GENERAL_DISCOVERY
Discover and select the highest-value current AI Security development; initialize CY-DOM-006 if needed; verify live exploitation, technical novelty, ecosystem impact and defensive value while separating AI use from demonstrated offensive efficacy.
Why this Topic?Agentic Offensive Frameworks in Real Intrusions — ARTEX & Multi-Agent Attack Automation
Candidate board selected live agentic offensive frameworks over Cursor AI-extension supply-chain, LiteLLM supply-chain, self-replicating prompt injection and MCP/tool-boundary candidates. Verified multi-origin in-the-wild ARTEX/agentic use, machine-speed automation/tempo, separate campaigns and explicit failed automated activity; preserved causal efficacy/prevalence gaps.
EVIDENCE
الأدلة وما تثبته
4 سجل
AIS-E-0001
Multiple threat actors were observed using ARTEX, PentAGI, CAIRN and related/custom agentic harnesses in real IR engagements across significant attack-lifecycle phases; ARTEX included compressed 2–25 second execution bursts and adaptive troubleshooting.
Google Threat Intelligence Group / Mandiantفتح المصدرCY-T2 / Primary Threat Intelligence & Incident Response
AIS-E-0002
STORM-0940 used ARTEX to automate attacks against hundreds of organizations; several attacks reached privileged cloud access in under three hours. A 151,000+ failed-logon password-spray branch produced no successful authentication/tokens/directory changes, providing direct negative-space.
UNKNOWN
CONTRADICTIONS
التناقضات والقيود
لا توجد تناقضات مسجلة لهذه الجولة.
UNCERTAINTY
الفجوات غير المحسومة
{"Notes":"Observed tempo ≠ causal success uplift.","Gap ID":"CY-GAP-AIS-001","Impact":"Blocks claims that AI itself universally increases attack success, monetization or stealth.","Status":"OPEN","Gap Type":"EFFICACY_CAUSAL_BASELINE","Priority":"HIGH","Domain ID":"CY-DOM-006","Topic IDs":"CY-TOP-AIS-001,CY-DOM-002,CY-DOM-004,CY-DOM-005","Description":"No controlled or strongly matched public baseline isolates the incremental effect of agentic/LLM tooling on end-to-end attack success from credentials, exploitable weaknesses, operator skill and ordinary automation.","Last Reviewed":"2026-11-01","Resolution Run":"ACRIP-AIS-20261101-001","Required Evidence / Resolution":"Controlled or matched AI-vs-non-AI/human workflow outcomes with comparable targets, prerequisites, success rates, time and operator effort."}
{"Notes":"Multiple campaigns establish diffusion, not total prevalence.","Gap ID":"CY-GAP-AIS-002","Impact":"Blocks population-level prevalence, adoption-rate and generalized campaign-scale claims.","Status":"OPEN","Gap Type":"PREVALENCE_ACTOR_ECOSYSTEM","Priority":"HIGH","Domain ID":"CY-DOM-006","Topic IDs":"CY-TOP-AIS-001,CY-DOM-007,CY-DOM-008","Description":"No reliable public denominator establishes how many actors, victims, successful intrusions or distinct forks comprise the current agentic-offensive-framework ecosystem.","Last Reviewed":"2026-11-01","Resolution Run":"ACRIP-AIS-20261101-001","Required Evidence / Resolution":"Multi-provider telemetry, framework/fork fingerprinting, independent victim counts and actor-linked infrastructure across campaigns."}
FOLLOW-UP
المتابعات غير المحسومة
2 مفتوحة
EFFICACY_CAUSAL_BASELINE
No controlled or strongly matched public baseline isolates the incremental effect of agentic/LLM tooling on end-to-end attack success from credentials, exploitable weaknesses, operator skill and ordinary automation.
OPEN
Priority: HIGH · Created: ٠٣/١١/٢٠٢٦، ١:١٣ م
PREVALENCE_ACTOR_ECOSYSTEM
No reliable public denominator establishes how many actors, victims, successful intrusions or distinct forks comprise the current agentic-offensive-framework ecosystem.
OPEN
Priority: HIGH · Created: ٠٣/١١/٢٠٢٦، ١:١٣ م
AUDIT TIMELINE
السجل الزمني الكامل
0 حدث
لا توجد run_events تاريخية لهذه الجولة؛ تُعرض حالات Lifecycle أعلاه كما هي من سجل Run ولا يتم اختلاق أحداث بديلة.
That ARTEX/AI caused every success, that all targets were compromised, or a universal success-rate advantage.
Confidence
غير مسجل
Context
ARTEX / STORM-0940 agentic intrusion activity
Microsoft Security Research / Microsoft Threat Intelligenceفتح المصدرCY-T1 / Provider Primary Threat Intelligence
AIS-E-0003
VAPOR PANDA used ARTEX with LLMs against more than 200 distinct organizations across at least 14 countries; post-exploitation was confirmed at nine organizations and the campaign was explicitly separated from STORM-0940.
UNKNOWN
Supports
Independent multi-target agentic campaign, ecosystem diffusion and confirmed post-exploitation subset.
Does not prove
Successful compromise of all 200+ targets, universal AI efficiency or complete actor-population prevalence.
CrowdStrike identified attacker-controlled infrastructure plus Claude Code/ARTEX artifacts tied to a campaign targeting South Korean financial organizations that resulted in exfiltrated data.
{"Notes":"Preserve vendor mappings as relations, not equivalence.","Gap ID":"CY-GAP-0801","Impact":"Blocks safe actor-alias merge and attribution transfer.","Status":"OPEN","Gap Type":"ACTOR_ALIAS_CROSSWALK","Priority":"HIGH","Domain ID":"CY-DOM-008","Topic IDs":"CY-TOP-0801,CY-TOP-AIS-001","Description":"Independent cross-vendor identity resolution is incomplete across GTIG UNC7228, Microsoft Storm-0940, Wiz overlap labels, CrowdStrike VAPOR PANDA and unattributed ARTEX clusters.","Last Reviewed":"2026-11-01","Resolution Run":"ACRIP-TAI-20261101-001","Required Evidence / Resolution":"Independent shared victim/event artifacts, infrastructure-control evidence, malware/tooling lineage and provider telemetry with time correlation."}
{"Notes":"Static IOC overlap alone is insufficient.","Gap ID":"CY-GAP-0802","Impact":"Blocks durable infrastructure ownership and cross-campaign continuity claims.","Status":"OPEN","Gap Type":"INFRASTRUCTURE_PROVENANCE_CONTINUITY","Priority":"HIGH","Domain ID":"CY-DOM-008","Topic IDs":"CY-TOP-0801,CY-TOP-AIS-001,CY-TOP-CSS-001","Description":"Public evidence does not fully resolve ownership/control, compromise state and first/last-seen continuity for ARTEX controllers, proxies and campaign C2 across clusters.","Last Reviewed":"2026-11-01","Resolution Run":"ACRIP-TAI-20261101-001","Required Evidence / Resolution":"Passive DNS, RDAP/WHOIS history, CT, provider logs and time-bounded controller artifacts."}
{"Notes":"Diffusion established; prevalence unknown.","Gap ID":"CY-GAP-0803","Impact":"Blocks population-level adoption/prevalence claims.","Status":"OPEN","Gap Type":"ECOSYSTEM_DENOMINATOR","Priority":"MEDIUM-HIGH","Domain ID":"CY-DOM-008","Topic IDs":"CY-TOP-0801,CY-TOP-AIS-001","Description":"No reliable denominator establishes total distinct ARTEX operators, forks/controllers, successful victims or currently active infrastructure after rapid proliferation.","Last Reviewed":"2026-11-01","Resolution Run":"ACRIP-TAI-20261101-001","Required Evidence / Resolution":"Multi-provider telemetry, fork lineage, controller fingerprints, independent victim counts and longitudinal infrastructure observations."}
NEW — multiple independent primary sources establish in-the-wild ARTEX/agentic framework use across distinct actor/campaign clusters and machine-speed automated sequences; generalized causal AI-driven success uplift remains unproven.